Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string "Mozilla" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer running Ray who inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This issue has been patched in version 2.52.0.

Active exploitation of this flaw has been observed in the wild. Apply the available patches as soon as possible.

Ray-Project Ray Code Injection Vulnerability (CVE-2025-62593)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool
    can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability
    is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent
    header starting with the string "Mozilla" as a defense mechanism. This defense is insufficient as the
    fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack
    against the browser, and this vulnerability is exploitable against a developer running Ray who
    inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This
    issue has been patched in version 2.52.0. (CVE-2025-62593)

ID	Name	Product	Family	Type	Severity
437184	SCA: security update for ray (GHSA-q279-jhrf-cc6v)	Tenable Cloud Security	SCA Checks	Local	critical
437184	SCA: security update for ray (GHSA-q279-jhrf-cc6v)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical

Detections

Analytics

CVE-2025-62593

critical

Tenable Plugins

Coming Soon

critical

critical